Unscored CVE-2002-0075 EUVD-2002-0075GHSA-v5w3-2jf3-qqmq

Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary scri…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.

References

20020411 [SNS Advisory No.49] A Possibility of Internet Information Server/Services Cross Site Scripting mailing-list
4487 vdb-entry
3341 vdb-entry
MS02-018 vendor-advisory
iis-redirected-url-error-css(8804) vdb-entry
oval:org.mitre.oval:def:58 vdb-entry signature
CA-2002-09 third-party-advisory
VU#520707 third-party-advisory
oval:org.mitre.oval:def:210 vdb-entry signature
20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018 vendor-advisory